I want to identify if a user's email address is associated with an office 365 subscription. I know that in one case I can query dns dig example.com mx and look for .mail.protection.outlook.com. in the output. But that doesn't catch everyone.
Is there anything else I can do to identify which of my users should be able to log in with oauth2?
If you take the domain of the email address you want to query and do a Get against
https://login.microsoftonline.com/{domain}/v2.0/.well-known/openid-configuration
That will return the OpenID Connect metadata document which should have all the information you need to determine that https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-protocols-oidc
Related
Using the Microsoft Graph API v 1.0, how can I retrieve the user's MFA details?
For example, if I have an email based sign-in/sign-up policy with phone/SMS MFA, how can I see the phone number entered by the user? (and also set update it)
I know if I select 'identities' in the GET /users method I can see the email they've signed up with, but not the phone number they set for MFA. (https://learn.microsoft.com/en-us/graph/api/resources/user?view=graph-rest-1.0)
Of course I'm looking for all the mfa settings: mfa phone number, mfa email address, is mfa set, etc.
Hopefully there is some kind of extension attribute that contains this that I can select, and set on creation, but I cannot find documentation on this.
[UPDATE]
In the Azure portal, I can see the entered data if I go to user > profile > authentication methods. So I tried accessing the authentication relationships on the user. but it didn't provide any details (all empty arrays) https://learn.microsoft.com/en-us/graph/api/resources/authentication?view=graph-rest-1.0
There's a write-up here.
e.g:
GET https://graph.microsoft.com/beta/users/objectID/authentication/methods
At our company, we are working with several aliases. The current situation is that one team of 10 has two aliases. In SalesForce, they would like to put the link to specific emails so that anybody out of the team can open an e-mail related to a claim for instance.
In the e-mail's link, there's the "/u/0" part that identifies the mail gmail account (firstname.lastname#...), but it seems that the aliases have a different number for everybody.
So to be clear when they open the same mail in the shared alias, the e-mail ID stays the same in the URL (logic) but the digit after the "/u/" changes for everybody.
Is there a way to generate a URL that will open the e-mail independently of the person that clicks on the URL ?
Edit:
I'll try to be clearer. Our Customer Service Center employees all have two e-mail adresses: an individual one, and a delegated one. Customers will send e-mails to the delegated one (accessible by all employees). So what we would like to do is copy the link of the e-mail into SalesForce so that any employee (who has access to the delegated gmail) can check the e-mail. But, as explained above, as the individual gmail adress is always identified by a "0" after the "/u/" chain in the URL:
https://mail.google.com/mail/u/0/#inbox/156b821f776b6d4a
the delegated gmail adress is identified by a number that differs depending on the person. So employee A will have "/u/144/" as link to the delegated gmail, another employee will have "u/345/ as link to the delegated gmail. This makes it impossible to access the e-mail by clicking the link...
Hope this little case-study makes the issue clearer.
Thanks in advance
Julien
I'm trying to do this too.
I think the only way (outside of paying for the Google business email system) is to have a database of user IDs that link to each user's gmail delegate URL.
I have a system that allows about 6 or 7 users to login, however they all share the login details (it's a small website, with no important information stored). I will have to force them all to have separate login details, and then have a lookup for their gmail delegate URL.
If you have a lot of staff, then you'd have to get their buy-in. Maybe send a global email around that links to a simple web form, that takes them through how to enter their delegate URL. Then store this in a database, with their own personal email (the other gmail account). You should make the form validation strict, so no garbage gets entered. For users who get stuck (fail validation for entering a valid gmail delegate URL), ask them to email support. 95% of staff should be able to handle this. The other 5% would just be an exercise in patience, in getting the rest of the data.
I want to find out email addresses of users in my team, I can get their usernames but unable to get the email addresses.
I have admin rights on all my teams.
I have tried the below URL but I get 403 Forbidden error.
https://confluence.atlassian.com/bitbucket/emails-resource-296911737.html
One cannot access the email addresses of other users on Bitbucket. Email addresses are considered somewhat private.
That (deprecated) endpoint is used to retrieve you own address (in which case the username can be omitted from the URL), or the email address registered on a team account that you are an admin of.
Note that the latter is no longer applicable, as we dropped the ability for team accounts to have email addresses.
To contact a team's admins, you can send a message to the team, which Bitbucket will relay to all admins. Messages can be sent through the INBOX page.
Note that the non-deprecated way to access the current user's email addresses is: https://api.bitbucket.org/2.0/user/emails
I'm trying to create a list of employees and their email addresses using the Quickbooks API. I'm using the following API call:
https://qb.sbfinance.intuit.com/v3/company/123/query?query=SELECT * FROM Employee
This returns a lot of great information, but not the email address. According to the docs, it should be returned as PrimaryEmailAddr. Any ideas?
UPDATE
It turns out that if you create a user in QuickBooks and attach that user to an existing employee, the email address used by the user does not automatically propagate to the employee record. So, my new question is this: is there any way to get the email addresses of users that are associated with a company (regardless of whether or not they are employees)?
What you are saying is if you invite some users(who are employees) to your company file using some email and that email address should come up when you query for employee entity. This use case is not supported. You need to explicitly mention the email address while creating an employee record, then only it will be retrieved on Read call.
There is no API to find the users associated with one company file.
Trying to access user profile from Yahoo using Oauth system and for that i am taking help of Scribe-Java API
its working fine except one issue whcih i am sure not related to the API i am using
In my yahoo profile i have following settings
Yahoo! Email --->amy_yahoo_id#yahoo.com
Email--->other_id#gmail.com Primary - Change
So what i am getting back is other_id#gmail.com which means i am not able to get correct information of the logged in user.Once i am able to get guid i am sending the request to following URL
http://social.yahooapis.com/v1/user/guid/profile?format=json
any way i can get the yahoo mail id to which user is associated in place of other id even if that is set as primary or along with any other email id all i want is to get the yahoo mail id of the user by which he/she logged in to the system.
Is there any specific reason you must get the yahoo account's email?
I also facing the same problem as you earlier.
After think over, primary email means to be the contactable email for the user.
So may be that's why yahoo make it that way.
Of course it will be good if they can provide one more email which is account's email.
But if you just want to have unique identifier, we can use the guid.
So may be you can check again, does your requirement must have the account's email?
or you just need an email where user set primary because they preferred to be contactable by that email?
Now I will just make use of the primary email return from Yahoo for my OAuth